validation - Invalid signature while validating Azure ad access token, but id token works -
i getting invalid signature while using jwt.io validate azure ad access token. id token, however, validates fine!
i have seen , tried solutions suggested in
invalid signature while validating azure ad access token
and
https://nicksnettravels.builttoroam.com/post/2017/01/24/verifying-azure-active-directory-jwt-tokens.aspx
neither works access token.
the access , id token generated via adal.js:
var endpoints = { "https://graph.windows.net": "https://graph.windows.net" }; var configoptions = { tenant: "<ad>.onmicrosoft.com", // optional default, sends common clientid: "<app id azure portal>", postlogoutredirecturi: window.location.origin, endpoints: endpoints, } window.authcontext = new authenticationcontext(configoptions);
why can validate id token, not access token?
please refer thread : https://github.com/azuread/azure-activedirectory-identitymodel-extensions-for-dotnet/issues/609
but if @ jwt.header see 'nonce'. means need special processing. normal processing fail.
so if nonce includes in access token , validate signature jwt.io or jwtsecuritytoken won't success .
Comments
Post a Comment